Follow us on Twitter!
Don't judge the unknown - Grindordie
Wednesday, April 16, 2014
Navigation
Home
HellBoundHackers Main:
HellBoundHackers Find:
HellBoundHackers Information:
Learn
Communicate
Submit
Shop
Challenges
HellBoundHackers Exploit:
HellBoundHackers Programming:
HellBoundHackers Think:
HellBoundHackers Track:
HellBoundHackers Patch:
HellBoundHackers Other:
HellBoundHackers Need Help?
Other
Members Online
Total Online: 21
Guests Online: 20
Members Online: 1

Registered Members: 82807
Newest Member: Black Hawk
Latest Articles
View Thread

HellBound Hackers | Computer General | OS specific

Author

Windows XP - totally fucked


Member

Your avatar

Posts:
Location:
Joined: 01.01.70
Rank:
Guest
Posted on 03-07-08 21:03
I am very knowledgeable of windows XP, but recently ive come across something that I cannot figure out on my own.

This is pretty weird.

So when I got to my control panel, and try to acess Windows Firewall, I get an "Windows firewall Service has not been started yatta yatta" error. I hit "start", but the service fails to start.

So then i go to Administrative tools and try to manually boot the service or set it to automatic start, but none of this works.

Next, I try to connect to the internet and do some research, but Firefox cannot establish a connection. I AM connected, but firefox can't see it. I mean i can Instant Messenger and stuff, but no browsing.

So Internet Exporer leads me through a diagnosis and says the Winsock has problems and needs to be reset. I let it reset the winsock, and i reboot. No success. I manually reset it through DOS "netsh winsock reset", but alas no success.

So pretty much I can ping and Instant messenger and talk to people, but no firefox, no browsing.

Now i think ive got a virus or something, so i boot up AVG 8.0

I hit update, but it cannot connect to the server. So this is bad.

Now ive booted up from a Mandriva live CD, which DID have success in firefox. So its definitely something in the OS.

Im going to try to find a downloadable definition file for AVG and pop that over to windows XP and try to virus scan.

In the meanwhile, does anybody else have any ideas, or ever had this happen?

Help!

Author

RE: Windows XP - totally fucked


Member

Your avatar

Posts:
Location:
Joined: 01.01.70
Rank:
Guest
Posted on 03-07-08 21:17
It looks like port 80 is being blocked by something. Can you try and connect to a web server using netcat? If you can't, then try downloading Spybot and scan with that (you'll need to download the definitions manually).


Author

RE: Windows XP - totally fucked


Member

Your avatar

Posts:
Location:
Joined: 01.01.70
Rank:
Guest
Posted on 03-07-08 22:44
Another recommendation for spybot here, its a quality piece of free software, I dont have a windows machine running without this installed.

*edit* - Wait, can you ping through port 80? like www.google.com?




Edited by on 03-07-08 22:46
Author

RE: Windows XP - totally fucked


Member

Your avatar

Posts:
Location:
Joined: 01.01.70
Rank:
Guest
Posted on 03-07-08 22:54
jjbutler88 wrote:
Another recommendation for spybot here, its a quality piece of free software, I dont have a windows machine running without this installed.

*edit* - Wait, can you ping through port 80? like www.google.com?


Lol. If he were unable to ping (or basically send generic packets of data to see if a host/server is alive) through to port 80, he wouldn't be able to browse the internet either (well not through HTTP anyway). Now, if you're talking about hosting something on port 80, it could be your ISP preventing you from using any server that uses port 80.

Now (I just read the post), try browsing through HTTPS and see what happens (I.E. https://www.hellboundhackers.org). I'm not sure why you'd be able to ping a site, but be unable to browse using a standard browser.




Edited by on 03-07-08 22:56
Author

RE: Windows XP - totally fucked


Member

Your avatar

Posts:
Location:
Joined: 01.01.70
Rank:
Guest
Posted on 03-07-08 23:31
Lol. If he were unable to ping (or basically send generic packets of data to see if a host/server is alive) through to port 80, he wouldn't be able to browse the internet either (well not through HTTP anyway).


Not necessarily. If just TCP packets on port 80 were blocked, no web traffic could get though, but pings use the ICMP protocol, which might not have been blocked. Its unlikely I admit but just tryin to get to the bottom of the problem, the solutions not going to be simple if the poster is knowledgeable (no reason not to believe it)


Author

RE: Windows XP - totally fucked


Member

Your avatar

Posts:
Location:
Joined: 01.01.70
Rank:
Guest
Posted on 04-07-08 10:08
I believe I had something similar once.
I don't know about the firewall problem because I wasn't using it then.
I could still browse, using IP.
Sometimes everything worked, sometimes just didn't.
Problem was some msn virus, which showed up in the processes..
I think it was called winudspm.exe, which was removed with combofix.exe.
I guess that spybot/etc could have seen it too. Not sure.
Use HijackThis, if out of ideas. Or system restore point.
Just my thoughts.
Author

RE: Windows XP - totally fucked

AldarHawk
Member



Posts: 1690
Location: Canada
Joined: 26.01.06
Rank:
Hacker Level 1
Posted on 04-07-08 16:52
DigitalFire: Contact me on MSN I can help you out with this problem as I have run into it in the past many times.


Just ask Yahoo!Taboo! http://www.erikwestlake.com
Author

RE: Windows XP - totally fucked


Member

Your avatar

Posts:
Location:
Joined: 01.01.70
Rank:
Guest
Posted on 04-07-08 19:06
Ok Avg is good but from what you tell me I would suggest scanning with avira because they usuially pick up a lot of virus and malware. I would say scan with that

www.free-av.com



Author

RE: Windows XP - totally fucked

korg
Admin from hell



Posts: 2798
Location: ENDING YOUR ONLINE EXPERIENCE!
Joined: 01.01.06
Rank:
God
Posted on 05-07-08 02:40
@digitalfire we've been through this before did you try Disabling Netbios over TCP/IP then reanabling it. Check your services and running processes for any rogue firewalls that may have been installed without your knowledge. Also check the event viewer for errors. post back with your full error on the firewall with the code.


i57.photobucket.com/albums/g215/korg1269/shodan13.jpg

I deal in pain, All life I drain, I dominate, I seal your fate.
O R
Author

RE: Windows XP - totally fucked


Member

Your avatar

Posts:
Location:
Joined: 01.01.70
Rank:
Guest
Posted on 05-07-08 11:08
Interestingly I had a similar problem recently. Firefox and explorer couldn't connect yet I was able to connect with seamonkey. I tried everything in firefox and even resorted to a complete reinstall(deleted everything first). Nothing. Tried rebooting killing useless processes in task manager. I even tried messing with my firewall to see if it was blocking only to find it turned off. So restored it to defaults got a new antivirus (deleted norton). No viruses were found though. I also finally got around to ripping the preinstalled software of my computer and what not. And suddenly I noticed that firefox was randomly working again....

Whatever. I decided to forget about it as a windows fluke and just went back to customizing my system settings (and got wireshark just in case). I had done this to my other computers just not my newest one yet (wanted to see if vista really is that bad, it is.)
Author

RE: Windows XP - totally fucked


Member

Your avatar

Posts:
Location:
Joined: 01.01.70
Rank:
Guest
Posted on 07-07-08 03:24
Hey everybody, thanks for the replies. The problem remains, however :angry:

So:
-Whoever said try https, that was a good idea, and i was excited. Yet that failed, so its more than just port 80 that is being blocked.

Korg: I DID try resetting netbios and doing a "netsh winsock reset", but this time it didnt work. The exact error from the firewall is:
Code
---------------------------

Windows Firewall

---------------------------

Windows Firewall settings cannot be displayed because the associated service is not running. Do you want to start the Windows Firewall/Internet Connection Sharing (ICS) service?

---------------------------

Yes   No   

---------------------------




I click "yes" and get

Code
---------------------------

Windows Firewall

---------------------------

Windows cannot start the Windows Firewall/Internet Connection Sharing (ICS) service.

---------------------------

OK   

---------------------------




I did not see any processes that looked suspicious, and killed all of them that were under my name. There were a few from "NETWORK RESOURCES" or something like that, and when i ended them, it rebooted my computer. Svchost has LOTS of spawns, not quite sure what they are up to. Speaking of Svchost, evertime my computer starts i get a

Code
---------------------------

svchost.exe - Application Error

---------------------------

The instruction at "0x7c918fea" referenced memory at "0x00000010". The memory could not be "written".

Click on OK to terminate the program

Click on CANCEL to debug the program

---------------------------

OK   Cancel   

---------------------------






this happens on the LOGIN screen. Im pretty sure its one of the processes i have on "auto" start, failing.

When i went through the control panel to access the event viewer, i went. Start>control panel>admin tools>comp management. When i clicked on any of the log categories, i got
Code
---------------------------

Event Viewer

---------------------------

Unable to complete the operation on "System".

The interface is unknown.

---------------------------

OK   

---------------------------



this happens for any of the categories, not just system.

Thanks for your help guys, any more ideas?

the status remains at : i cannot use Firefox or IE to access the web, but aim runs fire. AVG fails to update. Https fails as well.
Author

RE: Windows XP - totally fucked


Member

Your avatar

Posts:
Location:
Joined: 01.01.70
Rank:
Guest
Posted on 07-07-08 03:26
another thing ive noticed recently and didnt before, is my system tray. there used to be only one network icon, for Local Area Network. Now there are 2, one for LAN and one for internet. Everytime i boot it says "now connected to internet", which it never used to do before. If that helps at all.

thanks yall.
Author

RE: Windows XP - totally fucked

korg
Admin from hell



Posts: 2798
Location: ENDING YOUR ONLINE EXPERIENCE!
Joined: 01.01.06
Rank:
God
Posted on 07-07-08 03:34
Are you hooked to a network as in the domain controller or not. Also are you a guest or admin on this computer.


i57.photobucket.com/albums/g215/korg1269/shodan13.jpg

I deal in pain, All life I drain, I dominate, I seal your fate.
O R
Author

RE: Windows XP - totally fucked


Member

Your avatar

Posts:
Location:
Joined: 01.01.70
Rank:
Guest
Posted on 07-07-08 03:48
I'm not quite sure what you mean by "domain controller", but ive got the pass for the router and physical access to everything.

And yes, im admin.
Author

RE: Windows XP - totally fucked

korg
Admin from hell



Posts: 2798
Location: ENDING YOUR ONLINE EXPERIENCE!
Joined: 01.01.06
Rank:
God
Posted on 07-07-08 03:51
Is your account an admin in windows or are you a guest?


i57.photobucket.com/albums/g215/korg1269/shodan13.jpg

I deal in pain, All life I drain, I dominate, I seal your fate.
O R
Author

RE: Windows XP - totally fucked

korg
Admin from hell



Posts: 2798
Location: ENDING YOUR ONLINE EXPERIENCE!
Joined: 01.01.06
Rank:
God
Posted on 07-07-08 03:56
Try disabling the connection that say's internet and enable Local Area Connection.And vice verse.If not I'll post a reg. fix.I gotta cruise for now but I'll be back later.


i57.photobucket.com/albums/g215/korg1269/shodan13.jpg

I deal in pain, All life I drain, I dominate, I seal your fate.
O R
Author

RE: Windows XP - totally fucked


Member

Your avatar

Posts:
Location:
Joined: 01.01.70
Rank:
Guest
Posted on 07-07-08 04:06
Im admin.

and okay, ill go try that. Sure, send me a PM when you get back. i might hit the sac soon too. talk to you tomorrow.

catch you later

and thanks a bunch!
Author

RE: Windows XP - totally fucked


Member

Your avatar

Posts:
Location:
Joined: 01.01.70
Rank:
Guest
Posted on 11-07-08 04:22
can you connect via telnet??

start --> run
type cmd click ok

at the command prompt type
telnet www.google.com 80

if you can connect you'll get a blank screen, if not you'll get a prompte that say connecting to www.google.com

personnally, i would say you PC has RootKit installed on it, but that is not 100% for sure.

When the windows firewall service can't start it means that another programming is using that windows NDIS Driver shim for that service. For example, when running Routing and Remote Access (RRAS or the NAT and VPN sevice) on a windows 2003 service, you can't start the windows internet connection sharing/windows firewall service on the box.

A trojan can also cause the issue, a well designer virus will install such an NDIS driver on a PC and hide itself. When windows looks up it drivers it does so by using linked nodes......

<--Previous driver = Z(Driver a)Next driver-->B|<--previous driver=A(driver b)-->Next driver-->C|<--previous driver=B(driver C)-->Next driver=D|<--etc... etc..

A good virus will do this
<--Previous driver = Z(Driver a)Next driver-->C|<--previous driver=A(Virus driver b)-->Next driver-->C|<--previous driver=(driver C)-->Next driver=D|<--etc... etc..

In essence hidding itself from windows, because when windows enumerates its drivers it will skip from A to C, skipping B altogether.

Another issue that can cause this is DNS... but as someone suggested before ( I would image you tried it) even with DNS issues you should still be able to browse a site by it IP address, ie, for google.com http://64.233.183.99 should open google.

If ou can't use google via IP and DNS is working (start--> run Nslookup type google.com and check you get an answer) you have some deep OS issues. If telnet does not work, again OS issue (assuming you don't have a cisco router or the like blocking HTTP Traffic). Have you tried running wireshark as suggested and sniffing the packets....

I would love to troubleshoot this, very interesting issue..